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REMARKS 

Claims 1-2, 4-6, 8-10 and 12 have been pending. The claims are amended and 
cancelled without disclaimer or prejudice. Thus, the pending claims remain for reconsideration, 
which is requested. 

Claims 1-12 are rejected under 35 USC 103(a) as being unpatentable over Chang (US 
Patent Application Publication No. 200301 31110) in view of Glassman (US Publication no, 
20030149900). Further, claims 1, 2, 5, 5, 9 and 10 are rejected as being unpatentable over 
Change in view of Henry (US Patent no. 5,774,058). 

The independent claims 1 , 5 and 9 are amended to require the limitations of claims 3, 7 
and 10, respectively. The amendments are supported by the specification at page 14, line 19 to 
page 15, line 9, Claim 1 recites " wherein in determining the log-in procedure, the ioq-in 
procedure is determined by lowering the security level when a number of days since the last log- 
in date is smaller than a predetennined small number of days ." The Office Action acknowledges 
that Chang does not disclose this feature, so the Office Action relies upon Glassman and Henry. 

However, Glassman discloses "If the login attempt is invalid, the controller increments 
the count maintained in the invalid login count entry. If the count subsequently equals or 
exceeds a predefined threshold, the controller preferably changes the class of the login cookie 
from first-class to second-class" (paragraph 34). Therefore, Glassman does not disclose 
determining the log in procedure by lowering the security level when a number of days 
since the last log-in date is smaller than a predetermined small number of days. ' 

Moreover, Henry discusses an Idle-key-life variable for deactivating a key if Idle-key-life 
days have passed since the last login using a particular key, but does not disclose expressly or 
implicitly " wherein in determining the log-in procedure, the log-in procedure is determined by 
lowering the security level when a number of days since the last log-in date is smaller than a 
predetermined small number of days ." In other words, Henry is silent on the claimed security 
level adjustment according to log-in activity, namely, depending on "a predetermined small 
number of days '' 

Thus, a prima facie case of obviousness based upon Chang, Glassman and Henry 
cannot be established, because there is no evidence expressly or implicitly that one skilled in the 
art would combine Classman's change of the login cookie from fist class to second class 
depending on the invalid login count, with Henry's key deactivation based upon a last login date, 
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and then further modify Chang, Glassman and/or Henry to provided the claimed ' lowering the 
security level when a number of days since the last log-in date Is smaller than a 
predetermined small number of days '' 

Withdrawal of the rejections and allowance of the claims is requested. 

CONCLUSION 

There being no further outstanding objections or rejections, it is submitted that the 
application is in condition for allowance. An early action to that effect is courteously solicited. 

Finally, if there are any formal matters remaining after this response, the Examiner is 
requested to telephone the undersigned to attend to these matters. 

If there are any additional fees associated with filing of this Amendment, please charge 
the same to our Deposit Account No, 19-3935. 

Respectfully submitted, 
STAAS & HALSEY LLP 

/Mehdi D. Sheikerz/ 

Date: July 14, 2008 By: 

Mehdi D. Sheikerz 
Registration No- 41,307 

1201 New York Avenue, NW, 7th Floor 
Washington, D,C. 20005 
Telephone: (202)434-1500 
Facsimile: (202)434^1501 
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